Private app setup.
Generate your SP-API refresh token through Amazon's self-authorization workflow. This page is a guide and does not generate, receive or store credentials.
Open Solution Provider Portal ↗
01. Sign in as the primary account user
Sign in to Amazon Solution Provider Portal. For a Seller Central account, follow the seller sign-in link on the Manage Authorizations page. You must be the Primary User of the seller account to self-authorize it.
02. Find your private application
Locate the SP-API application associated with your LWA client ID. Open the application's authorization or Manage Authorizations page. A private application may be self-authorized while it is in draft status; it does not need to be published.
03. Choose Authorize app
Choose Authorize app for the seller account you want the application to access. Amazon displays a new refresh token for that account. Save it securely before leaving the page. Generating another refresh token does not invalidate earlier tokens.
Alternative: Seller Central
In Seller Central, choose Apps and Services → Develop Apps, locate your application, and open its authorization page. Button names may vary by account and language.
Open Seller Central · North America ↗
Use your store's regional Seller Central if it is registered in another region.
04. Configure your backend
Keep the LWA client ID, client secret and refresh token in protected server-side configuration. At runtime, the backend exchanges the refresh token for an access token at Amazon's LWA token endpoint. These values must never be embedded in a public page, URL or log.
If you cannot see Authorize app
- Check that you selected the private application linked to your credentials.
- Use the primary seller account and confirm the intended seller account is linked.
- Review any pending registration requirements or authorization limits shown by Amazon.
Having a client ID and client secret alone does not mean your seller account is authorized.
Official instructions
Amazon: Authorize Private Applications ↗
No client secret or refresh token should be entered on this website or sent in a support enquiry.